Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: SHpSzHH29WOF+w2PHUJn4kbRmzxyyenPp/UY9je1tZg=
Subject key identifier: 2B:5B:DA:4C:25:26:9B:BD:71:CD:B2:BC:73:A3:AC:F3:3C:0E:7E:06
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 019681D9AA40C8F678FD4840149088DD8CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 0BEC
Signing time: Tue 29 Apr 2025 14:00:47 +0000
Manifest this update: Tue 29 Apr 2025 14:00:47 +0000
Manifest next update: Wed 30 Apr 2025 14:00:47 +0000
Files and hashes: 1: KH_j-0tZP7kZGa_RGAqb8KjeOKE.roa (hash: nJQFit94GD/cIbI8GNPP+c6lmHYIPdofJMVeQt5hkQ4=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: JncP7Gh67E7yApfxtrbFmU316bzw/08d25WdEZK7KdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:aa:40:c8:f6:78:fd:48:40:14:90:88:dd:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Apr 29 14:00:47 2025 GMT
Not After : Apr 30 14:00:47 2025 GMT
Subject: CN=2b5bda4c25269bbd71cdb2bc73a3acf33c0e7e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:9d:65:92:b1:b0:d4:99:94:b7:c7:f5:de:
1b:c2:80:70:b3:fb:86:00:61:44:04:66:6e:a0:e3:
75:3e:03:fd:a2:51:c5:6f:69:9a:cd:01:ae:3d:18:
6c:cd:4c:bd:71:ed:99:b1:44:72:8c:62:6b:0b:5a:
12:8e:54:64:1b:b5:e5:d6:ba:dc:80:00:cb:9c:1c:
e8:e6:ff:20:37:1f:e6:cb:f7:8f:92:3d:9b:f6:fd:
00:0a:7b:ec:78:e3:8c:cf:46:f5:6b:5f:f7:38:64:
eb:bb:e4:ef:86:3f:5e:61:6f:7f:17:c7:54:5d:34:
14:7b:6d:c7:fb:47:11:eb:0e:7c:d9:62:84:a0:6e:
39:f6:9d:ef:cd:93:ae:f4:d4:f5:ad:3f:6a:bd:42:
d4:0a:be:14:d5:b3:cf:73:56:a2:a5:c7:9c:d3:35:
27:c9:b9:7b:07:3b:6b:5d:bd:d3:a9:13:c3:8f:e7:
fe:2e:bd:61:87:cc:19:76:f0:e7:07:67:f4:1b:31:
8a:9b:c5:15:38:6e:9c:c7:88:cb:93:45:0e:b7:10:
cb:f6:c1:d4:f3:a3:c7:a6:50:47:e5:da:1f:ad:f8:
af:07:7d:cc:05:5d:62:d8:7e:a3:41:3e:2c:57:06:
de:a9:d2:cc:8b:1f:2f:4e:73:61:90:14:47:26:e0:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5B:DA:4C:25:26:9B:BD:71:CD:B2:BC:73:A3:AC:F3:3C:0E:7E:06
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:95:f3:e7:ac:f1:00:d8:ad:c7:8d:fb:2e:51:dc:dd:a8:0b:
11:d9:33:a2:b2:a0:ff:18:01:0f:83:74:45:d2:11:3c:b7:1e:
a1:96:dc:15:c5:2a:95:26:26:4c:cd:d1:01:e1:2c:06:07:51:
90:93:b6:5f:30:17:5a:0d:12:59:e3:3e:f8:04:b7:78:cd:81:
e0:b0:91:e5:d9:56:d1:90:77:13:68:34:c4:90:40:b0:0a:8b:
9a:cf:e7:1a:03:dd:53:82:b2:2d:16:b8:6e:5b:6b:83:53:f9:
6b:1c:42:91:49:d3:05:05:04:8a:fc:45:14:24:4e:83:e3:51:
78:b7:f1:79:0f:48:2e:d2:f3:86:9b:75:14:c9:21:7b:59:15:
b4:29:75:cf:f8:07:c1:b4:11:ad:12:86:35:8a:42:71:7f:c1:
a8:b2:85:21:07:8a:7a:2b:42:5d:1e:9b:e5:6c:9c:b9:8c:19:
6b:9a:0b:71:d3:28:6f:30:2c:fc:b6:b5:25:2f:2f:aa:4f:b9:
78:95:07:ad:6c:c6:aa:bb:1c:76:00:02:27:08:b4:3b:43:6c:
61:78:ca:80:7a:cd:a0:9a:6c:b9:27:ad:46:be:fc:9d:1a:8a:
bc:79:39:63:1b:27:60:e0:45:aa:5a:20:35:a6:70:2f:a3:96:
7c:ff:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:30:18 2025 by rpki-client